Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity update

Red Hat: RHSA-2021:0270-01 Important: PolicyKit Security Enhancement

An update for gnome-settings-daemon is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: gnome-settings-daemon security update Advisory ID: RHSA-2021:0266-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0266 Issue date: 2021-01-26 CVE Names: CVE-2020-14391 ==================================================================== 1. Summary: An update for gnome-settings-daemon is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v. 8.2) - aarch64, ppc64le, x86_64 3. Description: The gnome-settings-daemon packages contain a daemon to share settings from GNOME to other applications. It also handles global key bindings, as well as a number of desktop-wide settings. Security Fix(es): * gnome-settings-daemon: Red Hat Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 1873093 - CVE-2020-14391 gnome-settings-daemon: Red Hat Customer Portal password logged and passed as command line argument when user registers through GNOME control center 6. Package List: Red Hat Enterprise Linux AppStream EUS (v. 8.2): Source: gnome-settings-daemon-3.32.0-9.el8_2.1.src.rpm aarch64: gnome-settings-daemon-3.32.0-9.el8_2.1.aarch64.rpm gnome-settings-daemon-debuginfo-3.32.0-9.el8_2.1.aarch64.rpm gnome-settings-daemon-debugsource-3.32.0-9.el8_2.1.aarch64.rpm ppc64le: gnome-settings-daemon-3.32.0-9.el8_2.1.ppc64le.rpm gnome-settings-daemon-debuginfo-3.32.0-9.el8_2.1.ppc64le.rpm gnome-settings-daemon-debugsource-3.32.0-9.el8_2.1.ppc64le.rpm x86_64: gnome-settings-daemon-3.32.0-9.el8_2.1.x86_64.rpm gnome-settings-daemon-debuginfo-3.32.0-9.el8_2.1.x86_64.rpm gnome-settings-daemon-debugsource-3.32.0-9.el8_2.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2020-14391 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYA/5xtzjgjWX9erEAQib8g/+K9ndDiU60D5UdsxW+PwA3VAuX2XDB4CM YqILLoiwf43loIKpm95mmq1MFQ7KhAe0CJoplWfcNnq9XoVh+aKST+zk2MTQczel fn0NE7QJ/zwdcFUM0bH5e9y7EyAJhFxqbkEw+8HtorZw3aRqSVxWmx/hnXE7Ay/Q j6SOoijmJZ6MeYVfnRHGZC5e5+z+a1zFLIjNKu5s3phyxH96V1Xz0SKK4GjVgFa+ w39FDbmMqqneYIYuSOUFbcy9BQ2yxX8jd8jnLo27FnT9VArXmKlTuzkxBc6H5tzW h+RdHtH+KdUA0v6F35LniWgBSxhFBlkWaHofhycG/ojCk4//xVZbLjaPA893Kzkq 9CGkZdpSHD2Zy4BhB6QNvllaArO9K3M7R4ttCBRyyOdqV2bU4UCPvXAJuNMHRCXh UUWTU8mT8Wpymi7kwcknJIse1zKEMnmjeOQTPyYqgHnw5jQiAKCo9D6+wsDxj8mK GUDTUX5k/bpPzYh6f/RNrrJtvPMLRTHkGOk+0RkukeySRMRepJqtHvJvMqTlhyZk /X7CwZKsrwmtX9KZ9lDlp4hm4zc+PqzZh/cgl2uh+zjFtJVTSyP0RXpxwfUtfyzz trzo5/Y+HGZhzL4MQGoUNxdpngK+naYHtKrdeuWagE88no1AOM4wjIPDjbe3AcM3 YjN1o/fqCS4=79jH -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Minor security patch for gnome-settings-daemon in Red Hat Enterprise Linux 8.2 addresses command line exposure issue.. Red Hat Enterprise Linux, gnome-settings-daemon, command line security, security advisory, security update. . Severity: Important. LinuxSecurity.com Team

Jan 26, 2021 •Important Red Hat